Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e203136363239.roa
File:                     3230302e35302e3131322e302f32312d3234203d3e203136363239.roa (raw, json)
Hash identifier:          tytRT0LD27Bdv9feNQz/5ngV71UXNsqaOJl40xoNq+0=
Subject key identifier:   2F:61:CE:E6:27:35:E5:22:14:BC:10:6C:DA:5C:A6:A1:E1:15:B8:94
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       487D5A033E4A34DEB4C6F8EDB961D59F011541DE
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:58 +0000
ROA not before:           Tue 04 Feb 2025 19:55:58 +0000
ROA not after:            Tue 03 Feb 2026 20:00:58 +0000
asID:                     16629
IP address blocks:        200.50.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7d:5a:03:3e:4a:34:de:b4:c6:f8:ed:b9:61:d5:9f:01:15:41:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:58 2025 GMT
            Not After : Feb  3 20:00:58 2026 GMT
        Subject: CN=2F61CEE62735E52214BC106CDA5CA6A1E115B894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:a8:ba:42:24:fb:98:ef:17:95:7d:41:f1:
                    d2:fc:e1:bf:ff:2f:0f:6c:bf:f8:da:11:97:7b:08:
                    27:00:87:8c:de:46:8b:e7:30:9d:82:a5:c4:92:5a:
                    04:45:be:18:91:1f:25:2f:2c:8c:81:86:1e:0c:27:
                    e4:7a:1e:d2:e7:b4:8a:ed:f2:85:05:66:52:f2:34:
                    86:ae:02:1b:99:9a:83:15:ae:86:88:5f:29:30:bd:
                    5a:58:d0:81:ba:49:83:4e:88:f6:c0:67:f7:c4:83:
                    1d:e6:71:87:a6:31:2c:db:26:46:fa:29:42:9d:8d:
                    d4:78:0c:e1:1e:cf:82:52:42:43:5a:b7:3c:46:82:
                    f9:18:22:60:66:0a:ae:93:c0:af:e4:3a:e7:c2:52:
                    f0:bd:15:00:4e:9a:fd:61:76:16:ef:bb:16:4e:37:
                    92:a9:9c:3d:04:19:f6:cf:77:ec:79:2e:4e:f2:6f:
                    1c:75:3d:9b:b1:02:a3:ec:5f:25:57:20:cc:1b:24:
                    41:ab:45:00:66:3d:f5:2f:9a:70:db:bd:4e:9d:eb:
                    af:84:cc:45:c8:71:5d:0e:f3:c3:bd:13:da:cb:27:
                    fe:3b:53:5f:a9:8c:17:18:7b:04:b9:56:ca:77:07:
                    58:84:11:bc:2a:02:08:71:7d:60:b7:42:14:d9:67:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:CE:E6:27:35:E5:22:14:BC:10:6C:DA:5C:A6:A1:E1:15:B8:94
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:03:03:7a:80:d8:84:39:23:32:5f:fa:7a:4e:81:4c:c1:
         54:9d:cd:0c:bf:6a:5e:14:bf:33:f7:3e:e8:7d:71:7c:d7:59:
         b0:66:51:e0:f1:b9:4c:89:1a:3c:8c:65:7b:da:05:28:f9:01:
         00:97:80:bb:06:7d:87:51:bc:ad:9c:2d:95:19:c9:da:1e:48:
         d0:8e:b1:bd:08:76:04:ea:c6:15:bc:ba:31:b7:7e:fd:53:a9:
         3c:d7:f2:6d:ef:d4:a7:ad:3b:eb:d2:55:8e:4c:81:41:42:4f:
         c6:16:48:49:d0:5e:2a:9d:b3:6b:51:42:4f:d0:b2:57:54:5d:
         db:c4:e6:3e:de:3f:6c:2c:1b:2f:01:60:8d:4b:48:3b:25:e2:
         e5:05:ee:a6:39:bb:5d:63:80:99:68:39:63:92:10:97:6e:71:
         b6:18:03:03:d0:20:ef:c5:46:30:e3:33:14:cf:80:d5:7b:b9:
         e2:c1:70:ff:6b:19:73:47:83:90:30:27:db:53:6d:3f:22:67:
         95:bb:59:82:ae:f4:9b:1c:79:7e:2e:76:0d:19:05:9e:c3:b0:
         a1:6e:b0:72:c7:1f:24:ac:c6:5d:eb:34:60:81:f8:2e:c9:29:
         5a:ed:a8:27:90:ad:01:0d:cb:d3:61:3f:24:87:f3:82:2a:71:
         61:0b:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:18 2025 by rpki-client